DDoS-for-Hire Networks Lose Their User Base

The takedown matters less for the 53 domains than for the user records behind them. Seizing booter infrastructure gives law enforcement a durable map of who bought DDoS capacity, which turns a disruption into a long-tail identification and prosecution resource. Europol’s Operation PowerOFF shut down 53 DDoS-for-hire domains across 21 countries, arrested four suspects, and sent more than 75,000 warning notices to identified users. Authorities also obtained databases with over 3 million alleged criminal accounts, which is the part that outlasts the service outage. That database exposure changes the threat picture for DDoS-for-hire ecosystems. Even if replacement sites appear, the customer base is now exposed to follow-on investigation, deterrence, and account linkage across other criminal services.

Part of the PlainSec briefing for 2026-04-18

Sources